CVE Vulnerability Database

Complete database of CVE vulnerabilities. Track critical security threats, exploits and patches. Updated daily from NVD NIST.

CVE-2026-85851

7.8

Use after free in Windows SmartScreen allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85850

7.8

Release of invalid pointer or reference in Windows Kernel allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85849

7.8

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85848

7.8

Heap-based buffer overflow in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85847

6.5

Out-of-bounds read in Windows Print Spooler Components allows an unauthorized attacker to disclose information over a network.

Microsoft
Details

CVE-2026-85846

7.0

Use after free in Windows Web Account Manager allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85843

7.8

Use of uninitialized resource in Windows Background Intelligent Transfer Service (BITS) allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85842

7.8

Use of externally-controlled format string in Windows Image Acquisition allows an authorized attacker to elevate privileges locally.

Microsoft
Details

CVE-2026-85841

6.6

Use after free in Windows DHCP Server allows an authorized attacker to execute code over a network.

Microsoft
Details

CVE-2026-85840

6.5

Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.

Microsoft
Details
← 1004/12252 →